Egregoros

Rust projects have almost as many random library dependencies getting pulled in as Nodejs, it's sickening really. The wider that net is cast the easier supply chain attacks are going to be.

Meanwhile the simplest dependency graph for a moderately complex project is probably Python because of it's Batteries Included approach

Elixir is pretty sensible too actually

@feld I think the best example of Rust dependency bloat is mise, a fancy Rust rewrite of asdf. asdf with it's statically linked go binary is ~5MB. Mise is 60MB.

Look at this: https://crates.io/crates/mise/2026.3.6/dependencies Why does it depend on tokio for async IO, why does it even need async IO.